Back Linuxsecurity

Fedora 43: duc Critical Fix for Stack Overflow CVE-2025

Linuxsecurity •LinuxSecurity Advisories • December 28, 2025

Duc is a collection of tools for indexing, inspecting and visualizing disk usage. Duc maintains a database of accumulated sizes of directories of the file system, and allows you to query this database with some tools, or create fancy graphs showing you where your bytes are. Update Information : Update to 1.4.6: fixes CVE-2025-13654

Duc is a collection of tools for indexing, inspecting and visualizing

disk usage. Duc maintains a database of accumulated sizes of directories

of the file system, and allows you to query this database with some tools,

or create fancy graphs showing you where your bytes are.

Update to 1.4.6: fixes CVE-2025-13654

* Wed Dec 17 2025 Jens Petersen - 1.4.6-1 - Update to 1.4.6: fixes CVE-2025-13654

[ 1 ] Bug #2423080 - CVE-2025-13654 duc: duc: Stack Buffer Overflow in buffer_get function [fedora-43]

This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2025-4d1c51d90a' at the command line. For more information, refer to the dnf documentation available at

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Critical Buffer Overflow Vulnerability in Duc Affects Fedora Users A critical buffer overflow vulnerability, identified as CVE-2025-13654, affects Duc, a tool for indexing and visualizing disk usage in Fedora. Users are advised to update to version 1.4.6 to mitigate this security risk. The vulnerability impacts Fedora 42 and 43 users who utilize Duc for disk management. 2 sources 46

Extracted Entities

Fedora 43: duc Critical Fix for Stack Overflow CVE-2025

The full story

Extracted Entities

Companies (1)

CVEs (1)

Vulnerabilities (1)